Allowing or Denying System Change

[Guest]

After Instaling

Windows XP Microsoft .NET Framework 3.0: x86 (KB928416) Friday, March 02,
2007 Microsoft Update
Windows XP Root Certificates Update Friday, March 02, 2007 Microsoft Update
Windows Defender Definition Update for Windows Defender - KB915597
(Definition 1.15.2329.4) Friday, March 02, 2007 Microsoft Update
Windows XP Windows Genuine Advantage Notification (KB905474)

Automatic updates prompted me to iinstall:
Windows XP February 2007 CardSpace Update for Windows XP (KB925720) Friday,
March 02, 2007 Automatic Updates
While this was installing, Windows defender popped up with:
Summary:
System Configuration change occurred.

This agent monitors security related configuration changes made to Windows.

Detected changes:
New: 3041:UDP:*:Enabled:Windows Media Format SDK (IEXPLORE.EXE)
Original: Not available

firewallport (New):
HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\3041:UDP

Advice:
Permit this configuration change only if you trust its origin. It is
recommended that you run a quick scan if you choose to deny this change.

Checkpoint:
Firewall Port Exceptions

Category:
Configuration Change

I aasume this is OK but why wouldn't defender recognize either the publisher
or the change.?

 

[Guest]

It recognized the change, that's why Defender alerted. As for the publisher,
this can be easily faked. The change can be safely allowed.